$ rpki-client -vvf repo-rpki.idnic.net/repo/e660e758-f65b-469a-8a1c-fb01984343b1/0/614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.mft File: 614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.mft (raw, json) Hash identifier: hOKlDHzq1j/x9BSWErc7U+zt5EOW5fiBxf14q+12MWM= Subject key identifier: 61:BC:CD:99:F1:A3:52:06:72:AD:94:92:E0:A4:E4:19:5D:AE:48:0B Authority key identifier: 61:4F:5C:6E:09:B1:E0:5A:7C:00:54:E6:2A:0C:D6:7B:CC:61:B6:98 Certificate issuer: /CN=614F5C6E09B1E05A7C0054E62A0CD67BCC61B698 Certificate serial: 6326D348D3B6EFC9455512B2F3AA87632DA76F43 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e660e758-f65b-469a-8a1c-fb01984343b1/0/614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.mft Manifest number: 65 Signing time: Sat 07 Jun 2025 11:01:56 +0000 Manifest this update: Sat 07 Jun 2025 10:56:56 +0000 Manifest next update: Tue 10 Jun 2025 15:29:56 +0000 Files and hashes: 1: 3130332e3230342e34362e302f32332d3233203d3e20313531353835.roa (hash: NvcYnOEp6TNwLUBjxvBXiVS/7BTrnJnJ+1wRwh9R1JM=) 2: 614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.crl (hash: IGhRghAm5Uu3rKqmCyATj1oyvJicHYvlnw0CoOfWYHM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e660e758-f65b-469a-8a1c-fb01984343b1/0/614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.crl rsync://repo-rpki.idnic.net/repo/e660e758-f65b-469a-8a1c-fb01984343b1/0/614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 15:29:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:26:d3:48:d3:b6:ef:c9:45:55:12:b2:f3:aa:87:63:2d:a7:6f:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=614F5C6E09B1E05A7C0054E62A0CD67BCC61B698 Validity Not Before: Jun 7 10:56:56 2025 GMT Not After : Jun 10 15:29:56 2025 GMT Subject: CN=61BCCD99F1A3520672AD9492E0A4E4195DAE480B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:89:85:46:27:10:dd:46:2c:c5:20:96:33:66: d9:e7:fb:4a:43:d1:27:2f:e0:ba:c0:ea:a7:51:e4: 52:ac:57:cc:40:89:06:b0:0b:7e:eb:85:c3:70:b5: c6:e0:fd:c8:ef:52:01:0f:d4:92:a4:91:9b:a5:38: 1f:6c:7e:e4:3d:73:1b:0b:1c:46:d5:7f:44:af:6b: 48:44:84:db:a4:43:ed:01:d0:58:b6:18:af:eb:a9: 08:e0:f1:5b:02:fc:3f:3e:58:1f:35:c8:74:3e:cf: de:38:0f:13:75:87:95:c2:f8:8d:1a:0c:1a:d3:56: 9a:10:46:13:e2:6e:60:10:53:e0:86:63:80:13:a8: a4:d4:e3:0a:e4:53:5e:94:3c:9d:ef:aa:b2:7a:cf: da:ad:7f:1d:3f:b3:f3:f3:e0:24:0c:ad:50:d0:ce: fd:9c:42:d7:1f:e4:14:08:43:2f:db:fa:29:4f:20: 41:0c:a6:ec:0e:3c:27:55:3b:d3:61:ce:89:8e:37: 63:d8:38:51:50:33:4d:c9:d8:58:a3:d8:5b:1b:7c: 97:d5:08:77:04:0e:e2:fd:ac:67:09:de:79:b3:88: c2:4d:9d:3e:b8:2a:e2:d6:38:ec:70:c5:f5:64:97: 15:c8:ed:c9:f3:7a:26:8f:da:83:ef:92:a5:ec:5a: 0a:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:BC:CD:99:F1:A3:52:06:72:AD:94:92:E0:A4:E4:19:5D:AE:48:0B X509v3 Authority Key Identifier: keyid:61:4F:5C:6E:09:B1:E0:5A:7C:00:54:E6:2A:0C:D6:7B:CC:61:B6:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e660e758-f65b-469a-8a1c-fb01984343b1/0/614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e660e758-f65b-469a-8a1c-fb01984343b1/0/614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:21:13:dd:f3:0a:3c:9a:9a:2e:fb:b9:69:7c:c5:42:2c:91: 9b:89:12:0d:b4:c7:0e:02:2f:0f:d1:cb:c6:9b:87:a0:4f:ea: ce:63:10:33:41:6c:f8:d4:d5:d8:dd:a1:3e:5d:7a:7e:c0:5b: 32:0b:e3:5f:ad:48:c4:cc:12:ae:a4:ca:3d:af:08:97:bd:27: fe:04:40:8c:ab:db:4b:1c:c4:ba:fe:16:08:87:d2:f1:28:4d: a0:f9:ac:1a:30:bb:aa:e7:fd:a9:35:f9:0d:40:28:aa:e3:93: 09:28:3f:1e:31:49:00:90:08:ac:1b:dc:69:13:fd:25:1b:5a: a2:0c:c4:16:12:b6:75:5f:a3:4b:0a:2f:7a:73:ac:a5:05:ee: 7c:b4:f1:ac:3f:aa:85:92:bd:39:73:8b:77:1f:8f:d5:a3:99: 2c:df:7d:a1:d2:bf:6b:3d:8f:66:8a:94:48:d5:2f:bd:97:6f: 53:b2:c1:38:a6:e7:13:a7:d6:ed:b0:26:40:57:b2:84:ea:67: 5e:77:d7:2f:21:2c:c8:6f:de:b5:0a:36:1e:81:6b:96:be:bf: 7a:84:ad:7d:5b:48:39:fb:d3:7c:c1:7a:fd:26:dc:bc:c8:47: 5d:39:d1:dc:21:cd:58:5a:7d:81:5f:d8:0a:f9:f0:d7:7d:ce: 1c:2e:ea:49 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYybTSNO278lFVRKy86qHYy2nb0MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjE0RjVDNkUwOUIxRTA1QTdDMDA1NEU2MkEwQ0Q2N0JD QzYxQjY5ODAeFw0yNTA2MDcxMDU2NTZaFw0yNTA2MTAxNTI5NTZaMDMxMTAvBgNV BAMTKDYxQkNDRDk5RjFBMzUyMDY3MkFEOTQ5MkUwQTRFNDE5NURBRTQ4MEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwiYVGJxDdRizFIJYzZtnn+0pD 0Scv4LrA6qdR5FKsV8xAiQawC37rhcNwtcbg/cjvUgEP1JKkkZulOB9sfuQ9cxsL HEbVf0Sva0hEhNukQ+0B0Fi2GK/rqQjg8VsC/D8+WB81yHQ+z944DxN1h5XC+I0a DBrTVpoQRhPibmAQU+CGY4ATqKTU4wrkU16UPJ3vqrJ6z9qtfx0/s/Pz4CQMrVDQ zv2cQtcf5BQIQy/b+ilPIEEMpuwOPCdVO9NhzomON2PYOFFQM03J2Fij2FsbfJfV CHcEDuL9rGcJ3nmziMJNnT64KuLWOOxwxfVklxXI7cnzeiaP2oPvkqXsWgrLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYbzNmfGjUgZyrZSS4KTkGV2uSAswHwYDVR0j BBgwFoAUYU9cbgmx4Fp8AFTmKgzWe8xhtpgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NjYwZTc1OC1mNjViLTQ2OWEtOGExYy1mYjAxOTg0MzQzYjEvMC82MTRGNUM2RTA5 QjFFMDVBN0MwMDU0RTYyQTBDRDY3QkNDNjFCNjk4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjE0RjVDNkUwOUIxRTA1QTdDMDA1NEU2MkEwQ0Q2N0JDQzYx QjY5OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTY2MGU3NTgtZjY1Yi00NjlhLThh MWMtZmIwMTk4NDM0M2IxLzAvNjE0RjVDNkUwOUIxRTA1QTdDMDA1NEU2MkEwQ0Q2 N0JDQzYxQjY5OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKghE93zCjyami77uWl8xUIskZuJEg20xw4C Lw/Ry8abh6BP6s5jEDNBbPjU1djdoT5den7AWzIL41+tSMTMEq6kyj2vCJe9J/4E QIyr20scxLr+FgiH0vEoTaD5rBowu6rn/ak1+Q1AKKrjkwkoPx4xSQCQCKwb3GkT /SUbWqIMxBYStnVfo0sKL3pzrKUF7ny08aw/qoWSvTlzi3cfj9WjmSzffaHSv2s9 j2aKlEjVL72Xb1OywTim5xOn1u2wJkBXsoTqZ1531y8hLMhv3rUKNh6Ba5a+v3qE rX1bSDn703zBev0m3LzIR1050dwhzVhafYFf2Ar58Nd9zhwu6kk= -----END CERTIFICATE-----Generated at Mon Jun 9 04:52:48 2025 by rpki-client